Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
File:                     Ska_UrGTBkf9JbeWkm28YUBL4-0.mft (raw, json)
Hash identifier:          vaGRQu3cgoADjleCvlIKvJ62ljrg5jFh5wZjwnnF1cg=
Subject key identifier:   AD:7B:28:56:18:F7:B2:35:34:64:DD:96:E9:4F:93:A7:99:80:A9:66
Authority key identifier: 4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED
Certificate issuer:       /CN=A91A8859/serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED
Certificate serial:       0D4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
Manifest number:          0D3F
Signing time:             Thu 24 Sep 2026 18:06:12 +0000
Manifest this update:     Thu 24 Sep 2026 18:06:12 +0000
Manifest next update:     Thu 01 Oct 2026 18:06:12 +0000
Files and hashes:         1: Ska_UrGTBkf9JbeWkm28YUBL4-0.crl (hash: nPd6yhH7RwAFGWKvUJl30lZ7JeN+mm3w+QZZd4TiZPg=)
                          2: 692ABA5A09DF11EAA6052433C4F9AE02.roa (hash: 1o/k0GFfoHNDOP+txbRSyPkBhEUl5bL6aMEbGrj1NA4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl
                          rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 18:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3402 (0xd4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8859, serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED
        Validity
            Not Before: Sep 24 18:06:12 2026 GMT
            Not After : Oct  1 18:06:12 2026 GMT
        Subject: CN=6ab56694-c5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c3:14:5f:9a:45:4a:d8:6e:0f:2f:01:0e:e6:
                    4d:ed:4a:0d:23:e6:f8:05:24:1c:ec:49:65:d7:5e:
                    8f:f8:fa:ba:cf:be:76:f0:8c:ba:8c:ed:1d:11:4a:
                    22:ee:c5:a8:f0:d3:cf:29:11:ba:6b:aa:37:b1:b4:
                    77:c7:af:40:0f:6f:02:1a:7b:26:7f:4f:3c:22:e4:
                    82:62:cc:e3:66:60:98:e5:97:0d:8a:ab:59:9d:07:
                    21:c2:5c:d9:8e:24:00:6b:2b:ab:f4:71:b9:2b:90:
                    26:97:60:8a:ed:7f:be:b2:c9:b8:92:34:5f:e1:06:
                    fd:2b:df:04:f9:16:71:bd:0b:4f:c9:bb:66:84:94:
                    03:76:f2:c6:09:7c:e2:54:bd:5b:87:99:f6:e7:45:
                    60:3e:9e:74:aa:14:48:f0:b3:25:1e:33:3c:ef:44:
                    b9:b2:0d:49:88:b6:73:77:40:f7:7e:58:d8:f3:3c:
                    ce:68:8c:a7:49:d6:63:18:6b:02:8c:e5:65:1d:19:
                    49:23:4f:d2:f8:4d:16:87:5f:ef:88:d3:ee:45:ac:
                    a2:6d:da:39:89:8f:fc:2e:a4:eb:f1:6d:9e:7f:eb:
                    cc:46:88:df:4a:98:f9:2e:f3:07:9a:0e:ed:dd:2a:
                    59:c8:79:06:1d:5c:c3:c1:f8:68:9f:0f:b8:bd:d8:
                    95:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7B:28:56:18:F7:B2:35:34:64:DD:96:E9:4F:93:A7:99:80:A9:66
            X509v3 Authority Key Identifier:
                keyid:4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:1a:00:b5:47:7b:74:aa:4d:1a:3f:dc:fc:20:df:be:93:42:
         ed:a9:60:27:06:5c:ca:86:53:c8:dd:3d:df:74:71:d1:21:6f:
         84:0a:91:bc:42:bc:ba:24:bb:5c:e9:f7:07:ff:88:0a:11:02:
         50:66:03:b0:6f:6d:2c:0b:37:18:52:71:d0:3f:c2:59:d1:ed:
         f1:4c:e8:23:57:d9:3e:c8:55:47:5d:2b:1a:07:de:81:cb:92:
         2a:f8:1d:d3:c9:c3:15:33:c6:8a:f1:b0:d3:51:79:16:63:4e:
         e2:7a:c4:a3:24:07:dd:a7:d5:ba:f3:7b:da:f2:bf:23:7d:cb:
         4e:9a:f3:ff:ad:50:b1:5b:e7:6a:6f:d7:aa:9e:90:98:88:df:
         94:dd:36:07:4d:25:6c:21:03:2c:3a:f2:d4:9a:d8:ec:e9:bf:
         49:7f:71:22:a6:ea:09:27:90:22:20:92:82:80:08:13:bc:02:
         a1:6c:71:07:e6:6a:77:c7:98:fd:ff:f5:a8:90:86:25:c9:bd:
         f1:47:c5:e7:c7:77:ff:13:c2:db:83:20:43:e4:4e:fb:80:a8:
         7c:e3:b7:c8:b0:9c:14:9b:45:01:be:04:ff:3e:65:37:3d:1e:
         9a:0d:0b:dd:03:34:3a:8f:da:06:1a:3e:af:e8:2f:26:40:02:
         dc:50:57:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:40:20 2026 by rpki-client